
AMENDMENTS TO THE CLAIMS 



1 . (currently amended): An architecture for a network access server, the architecture 
comprising: 

a first network interface device (3 76 A) for communicating with a first network-(§0) 
having a first protocol type, where the first network interface device has a first interface terminal 
for coupling to the first network and a second interface terminal, and where the first network 
device is configured to perform processing for the first protocol type for data packets exchanged 
between the first and second interface terminals of the first network device; 

a second network interface device (382) for communicating with a second network-(§3) 
having a second protocol type, where the second network interface device has a first interface 
terminal for coupling to the second network and a second interface terminal coupled to the 
second interface terminal of the first network device, and where the second network device is 
configured to perform processing for the second protocol type for a first type of data packet 
exchanged between the first and second interface terminals of the second network device;-aftd 

a third network interface device-{500) for communicating with the second network-(§3), 
where the third network interface device has a first interface terminal for coupling to the second 
network, a second interface terminal coupled to the second interface terminal of the first network 
device, and a third interface terminal coupled to the first interface terminal of the second network 
device, and where the third network device is configured to perform processing for the second 
protocol type for a second type of data packet exchanged between the first and second interface 
terminals of the third network device, the third network interface device being further configured 
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to detect reception of the firs type of data packet at the first interface terminal of the third 
network interface device and route the first type of data packet to the third interface terminal of 
the third network interface device ; andr 

wherein the first protocol type of the first network is a first real-time sensitive protocol 
and the second protocol type is a second real-time sensitive protocol configured to route each 
data packet to a destination address included in each data packet 

2. (canceled). 

3. (original): The architecture of claim 2, wherein the first protocol type is one of H.323 and 
H.324, and the second protocol type is EP/RTP. 

4. (original): The architecture of claim 3, wherein the first type of data packet is an unencrypted 
IP data packet and the second type of data packet is an encrypted data packet. 

5. (original): The architecture of claim 4, where the second type of data packet is an EPsec 
encrypted data packet. 

6. (original): The architecture of claim 5, where the third network interface device is configured 
to identify the second type of data packet by determining whether one of an AH field and an ESP 
field is present in a predetermined header of the second type of data packet, and where the third 
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network interface device is further configured to detect the first type of data packet by detecting 
that the AH field and the ESP field are absent fi-om the predetermined header of the first type of 
data packet. 

7. (original): The architecture of claim 1, wherein the second and third network interface 
devices share a predetermined network address on the second network. 

8. (original): The architecture of claim 1, wherein the third network interface device fiirther 
comprises: 

a switching device having a first terminal coupled to the first interface terminal of the 
third network interface device, a second terminal, and a third terminal coupled to the third 
interface terminal of the third network interface device, where the switching device is configured 
to identify the first type of data packet received at the first terminal and route it to the third 
terminal and identify the second type of data packet received at the first terminal and route it to 
the second terminal; and 

a fourth network interface device for processing the second protocol type for the second 
type of data packet, where the fourth network interface device has a first terminal coupled to the 
second terminal of the switching device and a second terminal coupled to the second interface 
terminal of the third network interface device. 

9. (original): The architecture of claim 8, where the switching device holds a predetermined 
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network address on the second network that is shared by the second and fourth network interface 
devices. 

10. (original): A method for processing data packets in a network access device, the method 
comprising the steps of: 

receiving a data packet from a first network; 

determining whether the data packet has a first protocol type field in a header of the data 

packet; 

routing the data packet to a first gateway device for processing when the data packet has 
the first protocol type field;^^ 

routing the data packet to a second gateway device for processing when the data packet 
does not have the first protocol type field^T 

processing the data packet for a real-time sensitive protocol in the first gateway device; 

and 

processing the data packet for a security protocol and for the real-time sensitive protocol 
in the second gateway device. 

11. (original): A computer readable medium having stored therein instructions for causing a 
central processing unit to execute the method of claim 10. 
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12. (canceled). 

13. (original): The method of claim 12, where the real-time sensitive protocol is RTP and the 
security protocol is IPsec. 

14. (original): The method of claim 12, further including the steps of: 

routing the data packet to a third gateway device after processing by the first gateway 
device, where the third gateway device is coupled to a second network; and 

routing the data packet to the third gateway device after processing by the second gateway 

device. 

15. (original): The method of claim 14, where the real-time sensitive protocol is RTP and the 
security protocol is IPsec, and including the step of processing the data packet for one of an 
H.323 and an H.324 protocol in the third gateway device. 

16. (original): The method of claim 10, where the step of receiving a data packet from a first 
network includes using a single predetermined address for receiving the data packet from the first 
network when the data packet has the first protocol type field in the header of the data packet and 
when the data packet does not have the first protocol type field in the header of the data packet. 
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17. (currently amended): A network access server for communicating between first and 
second networks, the server comprising: 

a first gateway device for processing data flow between the first network and the network 
access server; 

a second gateway device for processing data flow between the first gateway device and 
the second network; 

a switching device interposed between the second gateway device and the second network 
for routing a first type of data packet fi-om the second network to the second gateway device and 
for processing a second type of data packet fi-om the second network and routing the second type 
of data packet to the first gatewa y; andT 

where the second type of data packet is an encrypted packet and where the switching 
device is configured to decrypt the second type of packet and route the second type of packet to 
the first gateway device based upon decrypted header information. 

18. (original): The network access server of claim 17, where the network access server has a 
single predetermined address on the second network. 

19. (canceled). 
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20. (original): The network access server of claim 17, where the second type of data packet is an 
BPsec encrypted packet and where the switching device is configured to perform IPsec decryption 
of the second type of packet. 

21. (original): The network access server of claim 20, where the switching device is configured 
to identify the second type of data packet by detecting whether one of an AH field and an ESP 
field is present in a predetermined header of the second type of packet. 

22. (original): The network access server of claim 20, where the switching device is configured 
to route the second type of packet to the first gateway device based upon a decrypted UDP 
header in the second type of packet. 

23. (original): The network access server of claim 22, where the first network is a PSTN and the 
first gateway device is configured to process one of an H.323 and an H.324 protocol. 

24. (original): The network access server of claim 23, where the second network is an internet 
protocol (IP) network, the second gateway device is configured to perform RTP protocol 
processing, and the switching device is configured to perform RTP protocol processing. 
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